Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.mft
File: DGZbHrEnmK4OUTDZpLXIYPMn-xo.mft (raw, json)
Hash identifier: jtdw0L+/Tar43FFSMPaSIHad6JyP3pHxNnVEOhS58NA=
Subject key identifier: BC:B7:D6:EE:FC:39:8C:1B:98:0F:52:52:48:30:29:22:08:F0:47:B6
Authority key identifier: 0C:66:5B:1E:B1:27:98:AE:0E:51:30:D9:A4:B5:C8:60:F3:27:FB:1A
Certificate issuer: /CN=0c665b1eb12798ae0e5130d9a4b5c860f327fb1a
Certificate serial: 019E1F108827908005F53E2166D58959D9BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGZbHrEnmK4OUTDZpLXIYPMn-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.mft
Manifest number: A4
Signing time: Wed 13 May 2026 02:00:37 +0000
Manifest this update: Wed 13 May 2026 02:00:37 +0000
Manifest next update: Thu 14 May 2026 02:00:37 +0000
Files and hashes: 1: DGZbHrEnmK4OUTDZpLXIYPMn-xo.crl (hash: 0oRaYLGl5aQ+Iu2ZchWboPXJG+jSCyOH7pisFRh1L6U=)
2: HWDXKcpeYuIm0JZrEg_ziDSr5-U.roa (hash: nvDBJqWAeki2gr4Pm4DWKQgwgBSew3rmSC0QFEN6mlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGZbHrEnmK4OUTDZpLXIYPMn-xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:88:27:90:80:05:f5:3e:21:66:d5:89:59:d9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c665b1eb12798ae0e5130d9a4b5c860f327fb1a
Validity
Not Before: May 13 02:00:37 2026 GMT
Not After : May 14 02:00:37 2026 GMT
Subject: CN=bcb7d6eefc398c1b980f52524830292208f047b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:77:68:ad:27:f7:82:45:3e:74:5f:d0:bb:bd:
f6:70:c9:dd:e0:7d:37:38:cf:ff:d6:97:63:9b:5e:
61:7a:b6:3f:18:89:0d:2d:fd:f7:46:af:09:e0:6f:
51:51:31:d1:1b:18:01:12:b9:2e:a8:19:80:58:a6:
1b:3d:52:d9:21:51:0d:10:ee:c1:da:e7:6d:3d:d1:
16:4e:b2:67:fb:e7:47:e1:b0:58:57:11:9f:4d:c7:
29:40:40:cd:89:4b:6b:98:08:ee:70:bd:63:cf:12:
43:5d:3e:d5:5e:68:9a:0f:e5:9f:0c:c0:ec:69:1e:
3e:13:95:c8:1f:c5:1c:b2:81:7e:c9:1e:e8:d5:02:
d0:8e:76:5f:17:e8:1f:1e:64:0a:56:8f:df:a5:2e:
5d:8d:21:85:f1:18:dd:4c:02:cb:d8:ba:d4:6b:d1:
a0:7f:36:92:d3:c7:48:a8:d9:c5:2e:19:5e:69:97:
50:56:67:d0:81:02:21:68:3f:9e:e9:d0:13:7d:80:
13:32:9e:cc:6a:7c:ba:78:24:74:5b:47:02:f1:95:
35:02:08:15:55:cb:49:9b:83:f9:de:e0:35:dc:ce:
a5:11:9a:07:57:d8:31:7a:1f:f4:e1:0a:6b:75:79:
26:5b:78:0b:d6:f9:13:08:6c:ac:21:e7:f9:95:b2:
bc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B7:D6:EE:FC:39:8C:1B:98:0F:52:52:48:30:29:22:08:F0:47:B6
X509v3 Authority Key Identifier:
keyid:0C:66:5B:1E:B1:27:98:AE:0E:51:30:D9:A4:B5:C8:60:F3:27:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGZbHrEnmK4OUTDZpLXIYPMn-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:64:5d:b1:a9:f2:f2:99:47:fd:9b:61:b7:b9:f0:72:73:b6:
98:9b:50:8c:77:8d:7f:2d:20:96:0b:52:1f:9e:e0:63:f0:45:
91:e4:b5:f4:e3:89:f9:c4:22:3a:ec:20:54:24:c8:ae:c3:00:
1c:aa:0a:cb:2a:27:67:54:c5:90:22:69:c2:65:2f:26:30:b2:
bb:ba:31:4b:dd:3c:ed:0a:83:f8:09:f2:3e:83:af:e8:45:2d:
bd:1c:65:26:1d:5e:b1:e3:74:cb:01:ac:76:90:da:c5:8e:d0:
47:8f:25:87:af:b6:10:90:e4:69:77:4e:3f:da:8e:b8:26:f5:
62:b8:59:a9:6f:86:8a:b2:af:ce:06:04:fb:ea:e5:d8:68:2b:
68:24:1d:03:11:14:59:66:76:55:3f:57:05:58:45:8e:71:b6:
70:c1:93:71:45:9f:b5:e2:44:7f:34:f5:e3:ef:12:26:f0:2d:
54:aa:5f:3a:98:c1:6b:8a:fc:77:3d:55:ed:a5:10:e6:7b:24:
15:1c:90:72:f2:47:37:59:d2:32:d2:14:6f:9f:8a:51:6f:43:
13:48:9f:2b:22:bc:ca:75:45:78:58:ea:84:94:b2:d0:3d:26:
2a:e7:f8:5f:1b:32:62:4a:82:f7:f1:c9:33:fa:cc:a1:7b:3e:
c4:71:5f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:02:50 2026 by rpki-client